Reverse Proxy Setup

A reverse proxy allows you to "pass" requests through your web server to another site or program. The reverse proxy will make it look like Syncthing’s GUI is a page within your existing site.

This is especially useful if:

  • You need to access the GUI on port 80 or 443 but you already host a website on the same device.

  • You want to share SSL certificates with an existing site.

  • You want to share authentication with an existing setup.

Server Configuration

If you have access to your web server’s configuration use the following examples to pass the location /syncthing on your web server to Syncthing’s GUI hosted on localhost:8384.

Apache

First of all, execute the following command to enable the Apache HTTP Proxy module and the headers module: a2enmod proxy_http headers.

Then, you may add the following to your Apache httpd configuration:

<Location/syncthing/>
ProxyPasshttp://localhost:8384/
ProxyPassReversehttp://localhost:8384/
RequestHeaderset"X-Forwarded-Proto"expr=%{REQUEST_SCHEME}
Requireallgranted
</Location>

Nginx 

location/syncthing/{
proxy_set_headerHost$host;
proxy_set_headerX-Real-IP$remote_addr;
proxy_set_headerX-Forwarded-For$proxy_add_x_forwarded_for;
proxy_set_headerX-Forwarded-Proto$scheme;
proxy_passhttp://localhost:8384/;
proxy_read_timeout600s;
proxy_send_timeout600s;
}

Caddy 

proxy /syncthing localhost:8384 {
 transparent
}
timeouts {
 read none
 write none
 header none
}

Caddy v2 

handle_path /syncthing/* {
 reverse_proxy http://localhost:8384 {
 header_up Host {upstream_hostport}
 }
}

Folder Configuration

If you don’t have access to your web server configuration files you might try the following technique.

Apache

Add the configuration below to a .htaccess file in the folder of your webroot which should redirect to the WebUI, /syncthing to produce the same behaviour as above

RewriteEngineOn
RewriteCond%{HTTPS}!=on
RewriteCond%{ENV:HTTPS}!=on
RewriteRule.*https://%{SERVER_NAME}%{REQUEST_URI}[R=301,L]
RewriteRule^(.*)http://localhost:8384/1ドル[P]

This method also redirects to HTTPS to prevent opening the GUI unencrypted.